DOCSLIB.ORG

Introduction to Finite Fields

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Introduction to Finite Fields Introduction to finite fields Fields and rings To understand IDEA, AES, and some other modern cryptosystems, it is necessary to understand a bit about finite fields. A field is an algebraic object. The elements of a field can be added and subtracted and multiplied and divided (except by 0). Often in undergraduate mathematics courses (e.g., calculus and linear algebra) the numbers that are used come from a field. The rational ⎧a ⎫ numbers Q =⎨:ab , are integers and b≠0⎬ form a field; fractions can be added (and ⎩⎭b subtracted) and multiplied (and divided). The real numbers R form a field. The complex numbers C form a field. Number theory studies the integers Z . The integers do not form a field. Integers can be added (and subtracted) and multiplied, but integers cannot always be divided. Sure, 6 5 divided by 3 is 2; but 5 divided by 2 is not an integer; is a rational number. The 2 integers form a ring, but the rational numbers form a field. Similarly the polynomials with integer coefficients form a ring. We can add (and subtract) polynomials with integer coefficients, and the result will be a polynomial with integer coefficients. We can multiply polynomials with integer coefficients, and the result will be a polynomial with integer coefficients. But, we cannot always divide X 2 − 4 XX3 + − 2 polynomials with integer coefficients: = X + 2 , but is not a X − 2 X 2 + 7 polynomial – it is a rational function. The polynomials with integer coefficients do not form a field, they form a ring. The rational functions with integer coefficients form a field. A field has two operations; they are usually written as addition and multiplication. Subtraction is just the inverse of addition; it is adding the additive inverse (e.g., 5 – 4 = 5 + (-4) = 1). Division is just the inverse of multiplication; it is multiplying 1 by the multiplicative inverse (e.g., 6363÷ =×−1 =× 6 = 2). A ring also has two 3 operations – addition and multiplication – and, although addition is assumed to have an inverse, in a ring it is not assumed that multiplication has an inverse. (Addition and multiplication are also assumed to have several other properties. For both a ring and a field, it is assumed that addition commutes and is associative. For both a ring and a field, it is assumed that multiplication distributes over addition. For a field but not for a ring, multiplication is assumed to be commutative.) The fields that we commonly used in mathematics courses ( Q , R , and C ) are infinite. For cryptological purposes, finite fields are useful. Finite field of p elements Recall that the integers mod 26 do not form a field. The integers modulo 26 can be added and subtracted, and they can be multiplied (so they do form a ring). But, recall that only 1, 3, 5, 7, 9, 11, 15, 17, 19, 21, 23, and 25 have multiplicative inverses mod 26; these are the only numbers by which we can divide. These twelve numbers are the positive integers that are less than or equal to 26 and relatively prime to 26. Recall that given an integer that is less than or equal to n and relatively prime to n we can use the extended Euclidean algorithm to find its inverse mod n. So, it is possible to construct the multiplicative inverses of 1, 3, 5, 7, 9, 11, 15, 17, 19, 21, 23, and 25 modulo 26. If the modulus is prime, we can construct an inverse for each positive integer that is less than or equal to the modulus.. So, for each prime p we can construct a finite field of p elements – the integers mod p. The integers mod 5 is a field of 5 elements {0, 1, 2, 3, 4}. Here are the addition and multiplication tables: + 01234 × 1234 001234 11234 112340 22413 223401 33142 334012 44321 440123 number additive inverse number multiplicative inverse 00 1 1 14 2 3 23 3 2 32 4 4 41 The identity for addition is 0, and the identity for multiplication is 1. This is a field. We denote the field of 5 elements by F5 Here is F3 the finite field of 3 elements. + 01 2 × 12 0012 112 1120 221 2201 Here is the finite field of 2 elements F2 . + 01 × 1 001 11 110 Viewing 0 and 1 as bits, + is just XORing bits, and multiplication is … well, multiplication is not too interesting. The American mathematician E.H. Moore (1862 – 1932) proved in 1893 that the number of elements of a finite field must be pn for some prime p and positive integer n, and he proved that for each prime p and positive integer n there is an essentially unique field of pn elements. .
Load more

Recommended publications
  • APPLICATIONS of GALOIS THEORY 1. Finite Fields Let F Be a Finite Field
    CHAPTER IX APPLICATIONS OF GALOIS THEORY 1. Finite Fields Let F be a finite field. It is necessarily of nonzero characteristic p and its prime field is the field with p r elements Fp.SinceFis a vector space over Fp,itmusthaveq=p elements where r =[F :Fp]. More generally, if E ⊇ F are both finite, then E has qd elements where d =[E:F]. As we mentioned earlier, the multiplicative group F ∗ of F is cyclic (because it is a finite subgroup of the multiplicative group of a field), and clearly its order is q − 1. Hence each non-zero element of F is a root of the polynomial Xq−1 − 1. Since 0 is the only root of the polynomial X, it follows that the q elements of F are roots of the polynomial Xq − X = X(Xq−1 − 1). Hence, that polynomial is separable and F consists of the set of its roots. (You can also see that it must be separable by finding its derivative which is −1.) We q may now conclude that the finite field F is the splitting field over Fp of the separable polynomial X − X where q = |F |. In particular, it is unique up to isomorphism. We have proved the first part of the following result. Proposition. Let p be a prime. For each q = pr, there is a unique (up to isomorphism) finite field F with |F | = q. Proof. We have already proved the uniqueness. Suppose q = pr, and consider the polynomial Xq − X ∈ Fp[X]. As mentioned above Df(X)=−1sof(X) cannot have any repeated roots in any extension, i.e.
    [Show full text]
  • A Note on Presentation of General Linear Groups Over a Finite Field
    Southeast Asian Bulletin of Mathematics (2019) 43: 217–224 Southeast Asian Bulletin of Mathematics c SEAMS. 2019 A Note on Presentation of General Linear Groups over a Finite Field Swati Maheshwari and R. K. Sharma Department of Mathematics, Indian Institute of Technology Delhi, New Delhi, India Email: [email protected]; [email protected] Received 22 September 2016 Accepted 20 June 2018 Communicated by J.M.P. Balmaceda AMS Mathematics Subject Classification(2000): 20F05, 16U60, 20H25 Abstract. In this article we have given Lie regular generators of linear group GL(2, Fq), n where Fq is a finite field with q = p elements. Using these generators we have obtained presentations of the linear groups GL(2, F2n ) and GL(2, Fpn ) for each positive integer n. Keywords: Lie regular units; General linear group; Presentation of a group; Finite field. 1. Introduction Suppose F is a finite field and GL(n, F) is the general linear the group of n × n invertible matrices and SL(n, F) is special linear group of n × n matrices with determinant 1. We know that GL(n, F) can be written as a semidirect product, GL(n, F)= SL(n, F) oF∗, where F∗ denotes the multiplicative group of F. Let H and K be two groups having presentations H = hX | Ri and K = hY | Si, then a presentation of semidirect product of H and K is given by, −1 H oη K = hX, Y | R,S,xyx = η(y)(x) ∀x ∈ X,y ∈ Y i, where η : K → Aut(H) is a group homomorphism. Now we summarize some literature survey related to the presentation of groups.
    [Show full text]
  • The General Linear Group
    18.704 Gabe Cunningham 2/18/05 [email protected] The General Linear Group Definition: Let F be a field. Then the general linear group GLn(F ) is the group of invert- ible n × n matrices with entries in F under matrix multiplication. It is easy to see that GLn(F ) is, in fact, a group: matrix multiplication is associative; the identity element is In, the n × n matrix with 1’s along the main diagonal and 0’s everywhere else; and the matrices are invertible by choice. It’s not immediately clear whether GLn(F ) has infinitely many elements when F does. However, such is the case. Let a ∈ F , a 6= 0. −1 Then a · In is an invertible n × n matrix with inverse a · In. In fact, the set of all such × matrices forms a subgroup of GLn(F ) that is isomorphic to F = F \{0}. It is clear that if F is a finite field, then GLn(F ) has only finitely many elements. An interesting question to ask is how many elements it has. Before addressing that question fully, let’s look at some examples. ∼ × Example 1: Let n = 1. Then GLn(Fq) = Fq , which has q − 1 elements. a b Example 2: Let n = 2; let M = ( c d ). Then for M to be invertible, it is necessary and sufficient that ad 6= bc. If a, b, c, and d are all nonzero, then we can fix a, b, and c arbitrarily, and d can be anything but a−1bc. This gives us (q − 1)3(q − 2) matrices.
    [Show full text]
  • On the Discrete Logarithm Problem in Finite Fields of Fixed Characteristic
    On the discrete logarithm problem in finite fields of fixed characteristic Robert Granger1⋆, Thorsten Kleinjung2⋆⋆, and Jens Zumbr¨agel1⋆ ⋆ ⋆ 1 Laboratory for Cryptologic Algorithms School of Computer and Communication Sciences Ecole´ polytechnique f´ed´erale de Lausanne, Switzerland 2 Institute of Mathematics, Universit¨at Leipzig, Germany {robert.granger,thorsten.kleinjung,jens.zumbragel}@epfl.ch Abstract. × For q a prime power, the discrete logarithm problem (DLP) in Fq consists in finding, for × x any g ∈ Fq and h ∈hgi, an integer x such that g = h. For each prime p we exhibit infinitely many n × extension fields Fp for which the DLP in Fpn can be solved in expected quasi-polynomial time. 1 Introduction In this paper we prove the following result. Theorem 1. For every prime p there exist infinitely many explicit extension fields Fpn for which × the DLP in Fpn can be solved in expected quasi-polynomial time exp (1/ log2+ o(1))(log n)2 . (1) Theorem 1 is an easy corollary of the following much stronger result, which we prove by presenting a randomised algorithm for solving any such DLP. Theorem 2. Given a prime power q > 61 that is not a power of 4, an integer k ≥ 18, polyno- q mials h0, h1 ∈ Fqk [X] of degree at most two and an irreducible degree l factor I of h1X − h0, × ∼ the DLP in Fqkl where Fqkl = Fqk [X]/(I) can be solved in expected time qlog2 l+O(k). (2) To deduce Theorem 1 from Theorem 2, note that thanks to Kummer theory, when l = q − 1 q−1 such h0, h1 are known to exist; indeed, for all k there exists an a ∈ Fqk such that I = X −a ∈ q i Fqk [X] is irreducible and therefore I | X − aX.
    [Show full text]
  • On Field Γ-Semiring and Complemented Γ-Semiring with Identity
    BULLETIN OF THE INTERNATIONAL MATHEMATICAL VIRTUAL INSTITUTE ISSN (p) 2303-4874, ISSN (o) 2303-4955 www.imvibl.org /JOURNALS / BULLETIN Vol. 8(2018), 189-202 DOI: 10.7251/BIMVI1801189RA Former BULLETIN OF THE SOCIETY OF MATHEMATICIANS BANJA LUKA ISSN 0354-5792 (o), ISSN 1986-521X (p) ON FIELD Γ-SEMIRING AND COMPLEMENTED Γ-SEMIRING WITH IDENTITY Marapureddy Murali Krishna Rao Abstract. In this paper we study the properties of structures of the semi- group (M; +) and the Γ−semigroup M of field Γ−semiring M, totally ordered Γ−semiring M and totally ordered field Γ−semiring M satisfying the identity a + aαb = a for all a; b 2 M; α 2 Γand we also introduce the notion of com- plemented Γ−semiring and totally ordered complemented Γ−semiring. We prove that, if semigroup (M; +) is positively ordered of totally ordered field Γ−semiring satisfying the identity a + aαb = a for all a; b 2 M; α 2 Γ, then Γ-semigroup M is positively ordered and study their properties. 1. Introduction In 1995, Murali Krishna Rao [5, 6, 7] introduced the notion of a Γ-semiring as a generalization of Γ-ring, ring, ternary semiring and semiring. The set of all negative integers Z− is not a semiring with respect to usual addition and multiplication but Z− forms a Γ-semiring where Γ = Z: Historically semirings first appear implicitly in Dedekind and later in Macaulay, Neither and Lorenzen in connection with the study of a ring. However semirings first appear explicitly in Vandiver, also in connection with the axiomatization of Arithmetic of natural numbers.
    [Show full text]
  • Formal Power Series - Wikipedia, the Free Encyclopedia
    Formal power series - Wikipedia, the free encyclopedia http://en.wikipedia.org/wiki/Formal_power_series Formal power series From Wikipedia, the free encyclopedia In mathematics, formal power series are a generalization of polynomials as formal objects, where the number of terms is allowed to be infinite; this implies giving up the possibility to substitute arbitrary values for indeterminates. This perspective contrasts with that of power series, whose variables designate numerical values, and which series therefore only have a definite value if convergence can be established. Formal power series are often used merely to represent the whole collection of their coefficients. In combinatorics, they provide representations of numerical sequences and of multisets, and for instance allow giving concise expressions for recursively defined sequences regardless of whether the recursion can be explicitly solved; this is known as the method of generating functions. Contents 1 Introduction 2 The ring of formal power series 2.1 Definition of the formal power series ring 2.1.1 Ring structure 2.1.2 Topological structure 2.1.3 Alternative topologies 2.2 Universal property 3 Operations on formal power series 3.1 Multiplying series 3.2 Power series raised to powers 3.3 Inverting series 3.4 Dividing series 3.5 Extracting coefficients 3.6 Composition of series 3.6.1 Example 3.7 Composition inverse 3.8 Formal differentiation of series 4 Properties 4.1 Algebraic properties of the formal power series ring 4.2 Topological properties of the formal power series
    [Show full text]
  • A Second Course in Algebraic Number Theory
    A second course in Algebraic Number Theory Vlad Dockchitser Prerequisites: • Galois Theory • Representation Theory Overview: ∗ 1. Number Fields (Review, K; OK ; O ; ClK ; etc) 2. Decomposition of primes (how primes behave in eld extensions and what does Galois's do) 3. L-series (Dirichlet's Theorem on primes in arithmetic progression, Artin L-functions, Cheboterev's density theorem) 1 Number Fields 1.1 Rings of integers Denition 1.1. A number eld is a nite extension of Q Denition 1.2. An algebraic integer α is an algebraic number that satises a monic polynomial with integer coecients Denition 1.3. Let K be a number eld. It's ring of integer OK consists of the elements of K which are algebraic integers Proposition 1.4. 1. OK is a (Noetherian) Ring 2. , i.e., ∼ [K:Q] as an abelian group rkZ OK = [K : Q] OK = Z 3. Each can be written as with and α 2 K α = β=n β 2 OK n 2 Z Example. K OK Q Z ( p p [ a] a ≡ 2; 3 mod 4 ( , square free) Z p Q( a) a 2 Z n f0; 1g a 1+ a Z[ 2 ] a ≡ 1 mod 4 where is a primitive th root of unity Q(ζn) ζn n Z[ζn] Proposition 1.5. 1. OK is the maximal subring of K which is nitely generated as an abelian group 2. O`K is integrally closed - if f 2 OK [x] is monic and f(α) = 0 for some α 2 K, then α 2 OK . Example (Of Factorisation).
    [Show full text]
  • Algebraic Number Theory
    Algebraic Number Theory William B. Hart Warwick Mathematics Institute Abstract. We give a short introduction to algebraic number theory. Algebraic number theory is the study of extension fields Q(α1; α2; : : : ; αn) of the rational numbers, known as algebraic number fields (sometimes number fields for short), in which each of the adjoined complex numbers αi is algebraic, i.e. the root of a polynomial with rational coefficients. Throughout this set of notes we use the notation Z[α1; α2; : : : ; αn] to denote the ring generated by the values αi. It is the smallest ring containing the integers Z and each of the αi. It can be described as the ring of all polynomial expressions in the αi with integer coefficients, i.e. the ring of all expressions built up from elements of Z and the complex numbers αi by finitely many applications of the arithmetic operations of addition and multiplication. The notation Q(α1; α2; : : : ; αn) denotes the field of all quotients of elements of Z[α1; α2; : : : ; αn] with nonzero denominator, i.e. the field of rational functions in the αi, with rational coefficients. It is the smallest field containing the rational numbers Q and all of the αi. It can be thought of as the field of all expressions built up from elements of Z and the numbers αi by finitely many applications of the arithmetic operations of addition, multiplication and division (excepting of course, divide by zero). 1 Algebraic numbers and integers A number α 2 C is called algebraic if it is the root of a monic polynomial n n−1 n−2 f(x) = x + an−1x + an−2x + ::: + a1x + a0 = 0 with rational coefficients ai.
    [Show full text]
  • Modular Arithmetic
    CS 70 Discrete Mathematics and Probability Theory Fall 2009 Satish Rao, David Tse Note 5 Modular Arithmetic One way to think of modular arithmetic is that it limits numbers to a predefined range f0;1;:::;N ¡ 1g, and wraps around whenever you try to leave this range — like the hand of a clock (where N = 12) or the days of the week (where N = 7). Example: Calculating the day of the week. Suppose that you have mapped the sequence of days of the week (Sunday, Monday, Tuesday, Wednesday, Thursday, Friday, Saturday) to the sequence of numbers (0;1;2;3;4;5;6) so that Sunday is 0, Monday is 1, etc. Suppose that today is Thursday (=4), and you want to calculate what day of the week will be 10 days from now. Intuitively, the answer is the remainder of 4 + 10 = 14 when divided by 7, that is, 0 —Sunday. In fact, it makes little sense to add a number like 10 in this context, you should probably find its remainder modulo 7, namely 3, and then add this to 4, to find 7, which is 0. What if we want to continue this in 10 day jumps? After 5 such jumps, we would have day 4 + 3 ¢ 5 = 19; which gives 5 modulo 7 (Friday). This example shows that in certain circumstances it makes sense to do arithmetic within the confines of a particular number (7 in this example), that is, to do arithmetic by always finding the remainder of each number modulo 7, say, and repeating this for the results, and so on.
    [Show full text]
  • Discrete Mathematics
    Slides for Part IA CST 2016/17 Discrete Mathematics <www.cl.cam.ac.uk/teaching/1617/DiscMath> Prof Marcelo Fiore [email protected] — 0 — What are we up to ? ◮ Learn to read and write, and also work with, mathematical arguments. ◮ Doing some basic discrete mathematics. ◮ Getting a taste of computer science applications. — 2 — What is Discrete Mathematics ? from Discrete Mathematics (second edition) by N. Biggs Discrete Mathematics is the branch of Mathematics in which we deal with questions involving finite or countably infinite sets. In particular this means that the numbers involved are either integers, or numbers closely related to them, such as fractions or ‘modular’ numbers. — 3 — What is it that we do ? In general: Build mathematical models and apply methods to analyse problems that arise in computer science. In particular: Make and study mathematical constructions by means of definitions and theorems. We aim at understanding their properties and limitations. — 4 — Lecture plan I. Proofs. II. Numbers. III. Sets. IV. Regular languages and finite automata. — 6 — Proofs Objectives ◮ To develop techniques for analysing and understanding mathematical statements. ◮ To be able to present logical arguments that establish mathematical statements in the form of clear proofs. ◮ To prove Fermat’s Little Theorem, a basic result in the theory of numbers that has many applications in computer science. — 16 — Proofs in practice We are interested in examining the following statement: The product of two odd integers is odd. This seems innocuous enough, but it is in fact full of baggage. — 18 — Proofs in practice We are interested in examining the following statement: The product of two odd integers is odd.
    [Show full text]
  • Fields Besides the Real Numbers Math 130 Linear Algebra
    manner, which are both commutative and asso- ciative, both have identity elements (the additive identity denoted 0 and the multiplicative identity denoted 1), addition has inverse elements (the ad- ditive inverse of x denoted −x as usual), multipli- cation has inverses of nonzero elements (the multi- Fields besides the Real Numbers 1 −1 plicative inverse of x denoted x or x ), multipli- Math 130 Linear Algebra cation distributes over addition, and 0 6= 1. D Joyce, Fall 2015 Of course, one example of a field is the field of Most of the time in linear algebra, our vectors real numbers R. What are some others? will have coordinates that are real numbers, that is to say, our scalar field is R, the real numbers. Example 2 (The field of rational numbers, Q). Another example is the field of rational numbers. But linear algebra works over other fields, too, A rational number is the quotient of two integers like C, the complex numbers. In fact, when we a=b where the denominator is not 0. The set of discuss eigenvalues and eigenvectors, we'll need to all rational numbers is denoted Q. We're familiar do linear algebra over C. Some of the applications with the fact that the sum, difference, product, and of linear algebra such as solving linear differential quotient (when the denominator is not zero) of ra- equations require C as as well. tional numbers is another rational number, so Q Some applications in computer science use linear has all the operations it needs to be a field, and algebra over a two-element field Z (described be- 2 since it's part of the field of the real numbers R, its low).
    [Show full text]
  • Factoring Polynomials Over Finite Fields
    Factoring Polynomials over Finite Fields More precisely: Factoring and testing irreduciblity of sparse polynomials over small finite fields Richard P. Brent MSI, ANU joint work with Paul Zimmermann INRIA, Nancy 27 August 2009 Richard Brent (ANU) Factoring Polynomials over Finite Fields 27 August 2009 1 / 64 Outline Introduction I Polynomials over finite fields I Irreducible and primitive polynomials I Mersenne primes Part 1: Testing irreducibility I Irreducibility criteria I Modular composition I Three algorithms I Comparison of the algorithms I The “best” algorithm I Some computational results Part 2: Factoring polynomials I Distinct degree factorization I Avoiding GCDs, blocking I Another level of blocking I Average-case complexity I New primitive trinomials Richard Brent (ANU) Factoring Polynomials over Finite Fields 27 August 2009 2 / 64 Polynomials over finite fields We consider univariate polynomials P(x) over a finite field F. The algorithms apply, with minor changes, for any small positive characteristic, but since time is limited we assume that the characteristic is two, and F = Z=2Z = GF(2). P(x) is irreducible if it has no nontrivial factors. If P(x) is irreducible of degree r, then [Gauss] r x2 = x mod P(x): 2r Thus P(x) divides the polynomial Pr (x) = x − x. In fact, Pr (x) is the product of all irreducible polynomials of degree d, where d runs over the divisors of r. Richard Brent (ANU) Factoring Polynomials over Finite Fields 27 August 2009 3 / 64 Counting irreducible polynomials Let N(d) be the number of irreducible polynomials of degree d. Thus X r dN(d) = deg(Pr ) = 2 : djr By Möbius inversion we see that X rN(r) = µ(d)2r=d : djr Thus, the number of irreducible polynomials of degree r is ! 2r 2r=2 N(r) = + O : r r Since there are 2r polynomials of degree r, the probability that a randomly selected polynomial is irreducible is ∼ 1=r ! 0 as r ! +1.
    [Show full text]